Simple Ajax Chat (WordPress plugin) vulnerabilities

Product

Simple Ajax Chat (WordPress plugin)

by Jeff Starr · last CVE Apr 15, 2022

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Simple Ajax Chat (WordPress plugin) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-25610	6.1	1%	Mar 25	WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability Affected: <= 20220115 through 20220115
CVE-2022-27850	4.3	0%	Apr 15	WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability Affected: <= 20220115 through 20220115